
IS Security Engineer (ISSE), TS/SCI with Polygraph
- Chantilly, VA
- $136,000-184,000 per year
- Permanent
- Full-time
- Assessment & Authorization (A&A):
- Preparing and submitting Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests with Plans of Action and Milestones (PoAMs)
- Developing, maintaining, and coordinating required Body of Evidence (BoE) documentation for system assets
- Collaborating across Technical Services and Security Services teams, as well as customer agency stakeholders, to ensure compliance
- Tracking workflow for lien remediation/resolution activities and entering tracking tool updates
- Evaluating system change requests and assessing both system and organizational risks associated with modifications
- Continuous Monitoring (ConMon):
- Executing ConMon activities within established timelines, including BoE collection and tracking tool updates
- Conducting recurring reviews of system state and security posture to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined.
- Providing recommendations for security control implementation and identifying necessary countermeasures or mitigating controls
- Responding to queries and requests for security information and reports
- Incident Response & Security Oversight:
- Supporting investigations of security incidents and reporting findings as necessary
- Assisting in the communication, implementation and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems
- Advising stakeholders on information assurance standards, dependencies, and emerging security technologies
- Engaging with Enterprise Security Services tools (e.g., Trellix, ACAS, Splunk) to track and remediate vulnerabilities and compliance deficiencies
- Education: Bachelor’s degree in Information Systems, Cybersecurity, or a related field (or equivalent experience)
- Experience: Minimum of 4 years of applicable experience in cybersecurity, RMF compliance, or system security engineering
- Certifications:
- Required: DoD 8570 IAM Level I certification (CAP, CND, Cloud+, GSLC, Security+ CE, or HCISPP) – must be active and valid
- Preferred: IAM Level II certification (CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, or HCISPP)
- Preferred Skills:
- Experience with cloud security implementations in Azure or AWS
- Strong understanding of security policies, risk management, and vulnerability assessment tools
- 401(k) with company match
- Comprehensive health and wellness programs
- Dedicated internal mobility team to support career advancement
- Paid education and professional certification opportunities
- Access to cutting-edge technologies and innovative projects
- Paid vacation and holidays to support work-life balance